Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
File: 3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: kQxfMomBsU+QkxZUUKq9uWVpH5+oRmJqWUQOfaq0eQE=
Subject key identifier: A7:70:E1:8B:4B:EA:24:E9:5B:3E:68:F4:DE:34:9D:6A:EA:04:19:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7E7DEA16767059CB3337EEFED2C70C51F418938D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 22 Aug 2025 14:47:20 +0000
ROA not before: Fri 22 Aug 2025 14:42:20 +0000
ROA not after: Fri 21 Aug 2026 14:47:20 +0000
asID: 51167
IP address blocks: 185.219.142.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7d:ea:16:76:70:59:cb:33:37:ee:fe:d2:c7:0c:51:f4:18:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 22 14:42:20 2025 GMT
Not After : Aug 21 14:47:20 2026 GMT
Subject: CN=A770E18B4BEA24E95B3E68F4DE349D6AEA04192E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cc:0c:59:b1:14:bc:14:ce:b0:c7:29:54:1d:
28:c2:f8:36:42:93:2a:77:96:3c:25:04:fc:43:dd:
d8:b0:4f:12:56:3e:b3:4b:ba:d3:14:6b:07:4a:d5:
fb:99:a2:c9:51:91:48:4a:73:6b:7c:34:7d:fc:12:
49:a6:d0:2c:ec:9f:a2:89:12:e1:7b:5c:1f:68:b5:
1b:65:c7:1a:e9:46:ba:49:ba:ad:9e:a7:a0:d8:4b:
27:22:fb:d7:e8:3c:ff:a7:95:2a:4a:16:42:c5:f0:
82:13:60:91:d7:5c:b3:6b:cd:57:3b:93:4e:47:ce:
74:e3:d5:a5:c5:b0:4f:07:e9:c9:a6:95:20:8f:c4:
87:68:ec:4e:34:cd:01:0d:57:64:e2:81:63:c8:7e:
c6:54:d8:ce:42:f6:cb:15:61:aa:ba:9f:13:47:b2:
6e:e7:b2:5c:9f:21:07:c7:5d:1c:1d:01:b4:f0:17:
f5:7f:45:b3:af:e8:3a:3f:a6:71:46:62:d8:40:a6:
5b:4d:5a:72:2a:9b:d8:79:07:76:b2:79:7d:51:74:
99:9d:a5:be:20:f1:7b:4e:64:59:82:50:56:4f:66:
91:12:5e:95:2f:50:3f:94:74:59:1b:35:de:f9:70:
5b:03:4c:21:9f:c7:bc:8c:4b:67:90:8f:00:31:c1:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:E1:8B:4B:EA:24:E9:5B:3E:68:F4:DE:34:9D:6A:EA:04:19:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3231392e3134322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.142.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:1c:bf:83:23:f4:c9:f4:72:57:69:03:28:40:33:e6:89:
4c:ba:50:bd:f3:70:dc:3a:00:fb:b4:e7:21:ea:22:a2:21:1d:
7b:52:e7:62:00:9c:cd:fd:3e:22:be:75:4e:2d:37:c2:d6:b3:
ba:2e:0f:b8:e4:3a:a7:a2:61:69:e7:4b:a4:ae:78:cd:be:be:
1d:f8:30:91:50:e6:29:e3:7b:62:52:ac:59:ec:82:2b:84:17:
17:da:7a:3c:1f:60:97:d0:e0:ca:ab:35:de:0e:ff:2c:97:1c:
f5:07:7e:b5:1c:c3:29:1a:d5:aa:80:c4:06:ee:57:dc:36:a1:
f7:90:65:fe:ad:7b:7b:62:e3:c4:10:8b:5a:da:8a:17:ae:1d:
03:28:de:f8:7a:62:b8:ee:94:4b:b8:76:03:ec:49:34:b8:21:
20:0c:74:07:5b:55:13:c8:29:7d:39:78:80:b4:80:e6:7f:fd:
8e:8c:38:04:be:c4:5b:4f:44:10:b8:2d:ca:0d:8f:b7:5d:1f:
69:97:02:fd:f4:00:4b:0e:44:0b:7e:7a:52:76:a8:a5:65:a0:
09:15:3c:59:5c:aa:ee:49:cc:d4:b7:2d:36:ab:9d:8e:1e:a1:
93:a3:ec:26:e3:5a:79:d7:2e:85:de:9c:45:45:8d:be:ec:fd:
ad:6e:27:95
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUfn3qFnZwWcszN+7+0scMUfQYk40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNTA4MjIxNDQyMjBaFw0yNjA4MjExNDQ3MjBaMDMxMTAvBgNV
BAMTKEE3NzBFMThCNEJFQTI0RTk1QjNFNjhGNERFMzQ5RDZBRUEwNDE5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6zAxZsRS8FM6wxylUHSjC+DZC
kyp3ljwlBPxD3diwTxJWPrNLutMUawdK1fuZoslRkUhKc2t8NH38Ekmm0Czsn6KJ
EuF7XB9otRtlxxrpRrpJuq2ep6DYSyci+9foPP+nlSpKFkLF8IITYJHXXLNrzVc7
k05HznTj1aXFsE8H6cmmlSCPxIdo7E40zQENV2TigWPIfsZU2M5C9ssVYaq6nxNH
sm7nslyfIQfHXRwdAbTwF/V/RbOv6Do/pnFGYthApltNWnIqm9h5B3ayeX1RdJmd
pb4g8XtOZFmCUFZPZpESXpUvUD+UdFkbNd75cFsDTCGfx7yMS2eQjwAxwQfJAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUp3Dhi0vqJOlbPmj03jSdauoEGS4wHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMjMxMzkyZTMx
MzQzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAC5244wDQYJKoZIhvcNAQELBQADggEBAGWQHL+DI/TJ9HJXaQMoQDPmiUy6UL3z
cNw6APu05yHqIqIhHXtS52IAnM39PiK+dU4tN8LWs7ouD7jkOqeiYWnnS6SueM2+
vh34MJFQ5inje2JSrFnsgiuEFxfaejwfYJfQ4MqrNd4O/yyXHPUHfrUcwyka1aqA
xAbuV9w2ofeQZf6te3ti48QQi1raiheuHQMo3vh6YrjulEu4dgPsSTS4ISAMdAdb
VRPIKX05eIC0gOZ//Y6MOAS+xFtPRBC4LcoNj7ddH2mXAv30AEsORAt+elJ2qKVl
oAkVPFlcqu5JzNS3LTarnY4eoZOj7CbjWnnXLoXenEVFjb7s/a1uJ5U=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:55 2025 by rpki-client